Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/583F47C01EB811F18CD447E9213D8C67.roa
File:                     583F47C01EB811F18CD447E9213D8C67.roa (raw, json)
Hash identifier:          +qQU2eQcSlrgXPyXzClMrgom8/dbNphplGEsy11Vftk=
Subject key identifier:   DB:79:E6:19:5B:C2:85:09:71:A9:98:A3:C0:40:80:40:98:55:C3:71
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       03CC
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/583F47C01EB811F18CD447E9213D8C67.roa
Signing time:             Fri 13 Mar 2026 08:40:53 +0000
ROA not before:           Fri 13 Mar 2026 08:40:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16276
IP address blocks:        103.189.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 08:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Mar 13 08:40:53 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69b3cd95-94ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:5f:50:0b:d5:e0:9d:5a:33:19:af:15:e7:
                    22:8b:ef:85:e4:5c:74:9b:27:f6:47:5d:46:d4:55:
                    f7:89:8a:83:8c:92:1a:00:e6:ec:b1:04:aa:27:fe:
                    07:de:3f:97:f9:72:56:95:13:c0:85:71:c6:72:39:
                    bf:cf:05:3a:1e:8d:97:bd:86:31:cf:ef:e7:f3:44:
                    83:48:8b:85:ec:1f:27:b9:7b:a1:83:3e:48:b4:5c:
                    3a:3e:ca:9a:cb:64:b8:1b:9f:89:d2:2f:51:3e:f7:
                    06:78:f5:6d:34:a6:e4:e4:6b:04:b3:e8:7b:c1:2a:
                    5e:71:42:e2:32:51:be:54:f5:a7:25:2c:73:ec:64:
                    09:51:4f:67:4c:9c:41:c2:e0:d8:68:c1:4e:d3:0a:
                    2c:65:96:1d:ca:7c:6e:b6:df:54:ed:cd:32:d8:0a:
                    e5:5b:c7:91:dd:0b:9f:6f:c3:c2:1b:4c:1d:fd:ca:
                    f4:8d:c8:1b:6b:80:9b:14:79:04:1d:4a:e0:53:e2:
                    34:c1:6a:55:f2:9b:a5:e9:a4:da:8e:51:70:56:3f:
                    72:a4:a5:6a:05:62:4d:20:47:d9:62:9f:d3:f1:25:
                    18:95:4f:52:ad:c2:aa:4a:cd:27:cb:2e:73:8f:24:
                    87:56:50:4d:a0:27:d3:be:42:23:a5:97:67:9d:c3:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:79:E6:19:5B:C2:85:09:71:A9:98:A3:C0:40:80:40:98:55:C3:71
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/583F47C01EB811F18CD447E9213D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d5:4e:7f:97:2d:28:47:1c:b0:3d:ec:ac:97:5e:cb:d3:27:
         c9:92:71:9e:72:d2:a2:7e:2b:44:20:9e:42:3f:f4:ad:0f:04:
         22:31:dd:da:30:81:cb:61:d8:15:6a:2e:f4:34:4a:1f:00:1b:
         c4:4f:75:f2:e2:21:ee:2d:dd:c2:25:15:8b:72:17:35:0a:a7:
         87:f0:97:c8:f4:93:7c:42:53:54:27:b6:58:44:f3:0f:04:42:
         7a:ae:50:9a:4a:ab:3d:13:8f:89:7d:3b:10:59:5a:7e:8d:52:
         b5:ae:31:c7:21:c5:74:76:19:a3:e9:4d:a1:66:cd:66:fb:b8:
         57:7f:0d:6e:b1:f5:a0:73:a7:03:ac:62:9b:89:f3:84:b6:48:
         fb:24:de:1f:04:ed:00:5a:47:32:8a:f7:73:3f:28:dd:1f:09:
         01:7f:0f:a5:b5:3a:cf:53:14:48:c3:f6:7a:13:e8:c7:6c:d9:
         ce:c6:ce:1c:36:e4:a0:50:57:e8:1b:48:34:ca:37:06:33:5c:
         f8:72:03:c2:b0:4b:ce:8a:91:a4:aa:f3:d1:9f:e0:f4:1a:7d:
         31:a0:4e:aa:df:c8:43:5f:df:b3:88:7a:ae:38:04:f1:43:65:
         7f:66:24:61:91:d4:75:89:56:d8:1f:33:ba:84:fa:c7:22:6f:
         5d:80:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:14:09 2026 by rpki-client